Hi,
We want to use API token from service account (Create a Service Account Refresh Token) to invoke 2day operations on VM resource (specifically unregister action, but that is not relevant) via API. But we are not able to do so.
If we use API token from normal user that is easy. First we create "Day 2 Action policy" that we assign to user or to custom role (that user has access to), issue API token and use it to invoke that 2-day action via API. The problem is that API token is valid only for 3 months.
For service account that is not possible (or we do not find it) - we cannot assign "Day 2 Action policy" to service account or add custom role to that service account. We also tried assign "Day 2 Action policy" to built-in roles (Administator, Member, Infrastructure Administator and Service Broker resource creator) but no luck.
TL;DR - How to assign "Day 2 Action policy" to service account? Or how to prolong validity for API tokens from normal users?
Best regards,
jernejj
-------------------------------------------